CVE-2026-112149
vraj404 Criminal-Management-System home.php move_uploaded_file unrestricted upload
CVSS Score
7.3
EPSS Score
0.0%
EPSS Percentile
0th
A vulnerability was identified in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. This impacts the function move_uploaded_file of the file home.php. The manipulation of the argument my_img leads to unrestricted upload. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The project was informed of the problem early through an issue report but has not responded yet.
| CWE | CWE-434 CWE-284 |
| Vendor | vraj404 |
| Product | criminal-management-system |
| Published | Oct 19, 2026 |
| Last Updated | Oct 19, 2026 |
Stay Ahead of the Next One
Get instant alerts for vraj404 criminal-management-system
Be the first to know when new high vulnerabilities affecting vraj404 criminal-management-system are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
vraj404 / Criminal-Management-System
2808d057e7ddc5295519a487365b0cacfd0ba8c4
References
vuldb.com: https://vuldb.com/vuln/422256 vuldb.com: https://vuldb.com/vuln/422256/cti vuldb.com: https://vuldb.com/cve/CVE-2026-112149 vuldb.com: https://vuldb.com/submit/1014014 github.com: https://github.com/vraj404/Criminal-Management-System/issues/1 github.com: https://github.com/vraj404/Criminal-Management-System/
Credits
🔍 Wuwj (VulDB User) VulDB CNA Team